@pushary/agent-hooks 1.1.0 → 1.2.0

package/dist/{chunk-VQYARC2K.js → chunk-7DQVIIHX.js}

@@ -256,7 +256,8 @@ var BRIDGE_HOOK_SOURCES = Object.freeze(Object.values(AGENTS).flatMap((agent) =>
 
 // ../contracts/src/agent-wiring.ts
 var COMPATIBLE_AGENT_TYPES = ["qwen_code", "codebuddy", "qoder", "droid", "devin"];
-var CANONICAL_PATH_KEYS = ["file_path", "path"];
+var CANONICAL_PATH_KEYS = ["file_path", "path", "notebook_path"];
+var CANONICAL_COMMAND_KEYS = ["command"];
 var SHELL_TOOLS = /* @__PURE__ */ new Set(["Bash", "PowerShell"]);
 var PATH_TOOLS = /* @__PURE__ */ new Set(["Write", "Edit", "MultiEdit", "NotebookEdit", "Read"]);
 var PHONE_ANSWERED_TOOLS = /* @__PURE__ */ new Set(["AskUserQuestion", "ExitPlanMode"]);
@@ -271,17 +272,17 @@ var canonicalToolName = (profile, toolName) => profile.toolAliases[toolName] ??
 var toToolLookup = (profile, toolName, toolInput, resolvePath = (path) => path) => {
   const tool = canonicalToolName(profile, toolName);
   if (SHELL_TOOLS.has(tool)) {
-    const command = firstString(toolInput, ["command"]);
-    if (!command) return { tool, input: toolInput, pathless: false };
+    const command = firstString(toolInput, [...profile.shellCommandKeys, ...CANONICAL_COMMAND_KEYS]);
+    if (!command) return { tool, input: toolInput, unreadable: true };
     const context = Object.fromEntries(
       profile.shellContextKeys.flatMap((key) => toolInput[key] === void 0 ? [] : [[key, toolInput[key]]])
     );
-    return { tool, input: { command, ...context }, pathless: false };
+    return { tool, input: { command, ...context }, unreadable: false };
   }
-  if (!PATH_TOOLS.has(tool)) return { tool, input: toolInput, pathless: false };
+  if (!PATH_TOOLS.has(tool)) return { tool, input: toolInput, unreadable: false };
   const filePath = firstString(toolInput, [...profile.pathInputKeys, ...CANONICAL_PATH_KEYS]);
-  if (!filePath) return { tool, input: toolInput, pathless: true };
-  return { tool, input: { ...toolInput, file_path: resolvePath(filePath) }, pathless: false };
+  if (!filePath) return { tool, input: toolInput, unreadable: true };
+  return { tool, input: { ...toolInput, file_path: resolvePath(filePath) }, unreadable: false };
 };
 var renderPreToolUseVerdict = (profile, verdict) => {
   if (profile.wire === "permission_decision") return verdict;
@@ -331,6 +332,7 @@ var QWEN_CODE = {
   },
   extraMatchers: ["mcp__.*"],
   pathInputKeys: ["absolute_path"],
+  shellCommandKeys: [],
   shellContextKeys: ["directory"],
   events: without("TeammateIdle", "Elicitation", "PermissionDenied"),
   wire: "permission_decision",
@@ -348,6 +350,7 @@ var CODEBUDDY = {
   toolAliases: {},
   extraMatchers: ["mcp__.*"],
   pathInputKeys: [],
+  shellCommandKeys: [],
   shellContextKeys: [],
   events: without("Elicitation", "PermissionDenied"),
   wire: "permission_decision",
@@ -365,6 +368,7 @@ var QODER = {
   toolAliases: {},
   extraMatchers: ["mcp__.*"],
   pathInputKeys: [],
+  shellCommandKeys: [],
   shellContextKeys: [],
   events: without("Elicitation", "PermissionDenied"),
   wire: "permission_decision",
@@ -387,6 +391,7 @@ var DROID = {
   },
   extraMatchers: ["mcp__.*"],
   pathInputKeys: [],
+  shellCommandKeys: [],
   shellContextKeys: [],
   events: ["PreToolUse", "PostToolUse", "UserPromptSubmit", "Notification", "Stop", "SubagentStop", "PreCompact", "SessionStart", "SessionEnd"],
   wire: "permission_decision",
@@ -412,6 +417,7 @@ var DEVIN = {
   },
   extraMatchers: ["mcp__.*"],
   pathInputKeys: [],
+  shellCommandKeys: [],
   shellContextKeys: [],
   events: ["PreToolUse", "PostToolUse", "UserPromptSubmit", "Stop", "SessionStart", "SessionEnd"],
   wire: "legacy_decision",
@@ -422,7 +428,6 @@ var DEVIN = {
 var HOOK_COMPATIBLE_PROFILES = Object.freeze([QWEN_CODE, CODEBUDDY, QODER, DROID, DEVIN]);
 var hookCompatibleProfile = (agentType) => HOOK_COMPATIBLE_PROFILES.find((profile) => profile.agentType === agentType);
 var hookCompatibleProfileBySource = (source) => HOOK_COMPATIBLE_PROFILES.find((profile) => profile.source === source);
-var compatibleConfigDir = (profile) => profile.configFile.slice(0, -1);
 var compatibleTargetFiles = (profile) => {
   const seen = /* @__PURE__ */ new Map();
   for (const file of [profile.configFile, profile.mcp?.file, profile.permissionRuleFile, profile.instructions?.file]) {
@@ -688,7 +693,71 @@ var compiledGlob = (glob) => {
   globCache.set(glob, compiled);
   return compiled;
 };
-var matchToolPattern = (pattern, toolName, arg) => {
+var PATTERN_INTENT = {
+  grant: "grant",
+  restrict: "restrict"
+};
+var SHELL_ESCAPE = "\\";
+var SHELL_DOUBLE_QUOTE = '"';
+var SHELL_SUBSTITUTION_SIGIL = "$";
+var SHELL_GROUP_OPEN = "(";
+var SHELL_QUOTES = /* @__PURE__ */ new Set(["'", SHELL_DOUBLE_QUOTE]);
+var SHELL_SEGMENT_SEPARATORS = /* @__PURE__ */ new Set([";", "\n", "&", "|"]);
+var SHELL_DOUBLED_SEPARATORS = /* @__PURE__ */ new Set(["&", "|"]);
+var SHELL_UNDECOMPOSABLE = /* @__PURE__ */ new Set(["`", "<", ">"]);
+var shellCommandSegments = (command) => {
+  const segments = [];
+  let current = "";
+  let quote = null;
+  for (let index = 0; index < command.length; index += 1) {
+    const char = command[index];
+    const next = command[index + 1];
+    if (quote !== null) {
+      if (char === SHELL_ESCAPE && quote === SHELL_DOUBLE_QUOTE && next !== void 0) {
+        current += char + next;
+        index += 1;
+        continue;
+      }
+      if (char === quote) quote = null;
+      current += char;
+      continue;
+    }
+    if (char === SHELL_ESCAPE && next !== void 0) {
+      current += char + next;
+      index += 1;
+      continue;
+    }
+    if (SHELL_QUOTES.has(char)) {
+      quote = char;
+      current += char;
+      continue;
+    }
+    if (SHELL_UNDECOMPOSABLE.has(char)) return null;
+    if (char === SHELL_SUBSTITUTION_SIGIL && next === SHELL_GROUP_OPEN) return null;
+    if (SHELL_SEGMENT_SEPARATORS.has(char)) {
+      if (next === char && SHELL_DOUBLED_SEPARATORS.has(char)) index += 1;
+      segments.push(current);
+      current = "";
+      continue;
+    }
+    current += char;
+  }
+  if (quote !== null) return null;
+  segments.push(current);
+  const present = segments.map((segment) => segment.trim()).filter((segment) => segment.length > 0);
+  return present.length > 0 ? present : null;
+};
+var everySegmentMatches = (command, matches) => {
+  const segments = shellCommandSegments(command);
+  return segments !== null && segments.every(matches);
+};
+var anySegmentMatches = (command, matches) => (shellCommandSegments(command) ?? [command]).some(matches);
+var shellSegmentsMatch = (command, intent, matches) => intent === PATTERN_INTENT.restrict ? anySegmentMatches(command, matches) : everySegmentMatches(command, matches);
+var rankWholeOrSegments = (toolName, arg, intent, matches) => {
+  const matched = toolName in POLICY_COMMAND_KEYS ? shellSegmentsMatch(arg, intent, matches) : matches(arg);
+  return matched ? "prefix" : "none";
+};
+var matchToolPattern = (pattern, toolName, arg, intent = PATTERN_INTENT.grant) => {
   const open = pattern.indexOf("(");
   if (open === -1 || !pattern.endsWith(")")) {
     return pattern === toolName ? "tool" : "none";
@@ -696,12 +765,14 @@ var matchToolPattern = (pattern, toolName, arg) => {
   if (pattern.slice(0, open) !== toolName || arg === void 0) return "none";
   const inner = pattern.slice(open + 1, -1);
   if (inner.endsWith(":*")) {
-    return arg.startsWith(inner.slice(0, -2)) ? "prefix" : "none";
+    const prefix = inner.slice(0, -2);
+    return rankWholeOrSegments(toolName, arg, intent, (segment) => segment.startsWith(prefix));
   }
   if (inner.includes("*")) {
     if (arg.length > GLOB_MAX_ARG_LENGTH) return "none";
     const compiled = compiledGlob(inner);
-    return compiled && matchGlobTokens(compiled, arg) ? "prefix" : "none";
+    if (!compiled) return "none";
+    return rankWholeOrSegments(toolName, arg, intent, (segment) => matchGlobTokens(compiled, segment));
   }
   return arg === inner ? "exact" : "none";
 };
@@ -748,11 +819,11 @@ var policyArgForms = (toolName, toolInput, cwd) => {
   }
   return forms;
 };
-var matchToolPatternAny = (pattern, toolName, args) => {
+var matchToolPatternAny = (pattern, toolName, args, intent = PATTERN_INTENT.grant) => {
   if (args.length === 0) return matchToolPattern(pattern, toolName);
   let best = "none";
   for (const arg of args) {
-    const rank = matchToolPattern(pattern, toolName, arg);
+    const rank = matchToolPattern(pattern, toolName, arg, intent);
     if (matchRankWeight(rank) > matchRankWeight(best)) best = rank;
   }
   return best;
@@ -995,6 +1066,7 @@ var verdictForPolicy = (policy) => {
   if (isAutoApprove(policy)) return "allow";
   return "requires_human";
 };
+var policyIntent = (policy) => policy.timeoutAction === "deny" ? PATTERN_INTENT.restrict : PATTERN_INTENT.grant;
 var selectGoverningRule = (policies, toolName, args, repoKey, sessionId) => {
   let best;
   let bestWeight = 0;
@@ -1003,7 +1075,7 @@ var selectGoverningRule = (policies, toolName, args, repoKey, sessionId) => {
   for (const candidate of policies) {
     if (!isRepoKeyMatch(candidate.repoKey, repoKey)) continue;
     if (candidate.sessionId && candidate.sessionId !== sessionId) continue;
-    const rank = matchToolPatternAny(candidate.tool, toolName, args);
+    const rank = matchToolPatternAny(candidate.tool, toolName, args, policyIntent(candidate));
     if (rank === "none") continue;
     const weight = matchRankWeight(rank);
     const scoped = candidate.sessionId ? 2 : candidate.repoKey ? 1 : 0;
@@ -1423,6 +1495,7 @@ var matchesGlobPath = (glob, path) => {
   const compiled = compiledGlob(glob);
   return compiled ? matchGlobTokens(compiled, path) : false;
 };
+var SCOPE_PATH_MAX_LENGTH = 200;
 var evaluateScope = (contract, path) => {
   if (!contract) return { outcome: "no_contract" };
   if (typeof path !== "string" || path.length === 0) return { outcome: "in_scope" };
@@ -1436,6 +1509,7 @@ var evaluateScope = (contract, path) => {
   return { outcome: "out_of_scope", path };
 };
 var scopeRequiresHuman = (verdict) => verdict.outcome === "out_of_scope" || verdict.outcome === "off_limits";
+var widenablePath = (path) => path.length > 0 && path.length <= SCOPE_PATH_MAX_LENGTH ? path : void 0;
 var scopeChangeReason = (verdict) => {
   if (verdict.outcome === "out_of_scope") {
     return `Outside the scope you approved: ${verdict.path}`;
@@ -1625,7 +1699,7 @@ var resolveGate = (input) => {
     kind: "gate",
     policy,
     scopeReason,
-    scopePath: scopeReason && "path" in scopeVerdict ? scopeVerdict.path : void 0
+    scopePath: scopeReason && "path" in scopeVerdict ? widenablePath(scopeVerdict.path) : void 0
   };
 };
 var toPolicyVersion = (value) => typeof value === "string" || typeof value === "number" ? String(value) : null;
@@ -1707,6 +1781,7 @@ var claudePermissionRequestOutput = (decision, reason, updatedInput) => ({
     decision: decision === "allow" ? { behavior: "allow", ...updatedInput ? { updatedInput } : {} } : { behavior: "deny", ...reason ? { message: reason } : {} }
   }
 });
+var COMPATIBLE_GATE_EVENT = "PreToolUse";
 var gateOutputFor = (source, event, decision, reason) => {
   let output;
   if (source === "claude" || source === "vscode") {
@@ -1744,6 +1819,11 @@ var gateOutputFor = (source, event, decision, reason) => {
       user_message: "Command denied via Pushary.",
       agent_message: reason ?? "Denied from Pushary"
     };
+  } else {
+    const profile = hookCompatibleProfileBySource(source);
+    if (profile && event === COMPATIBLE_GATE_EVENT) {
+      output = renderPreToolUseVerdict(profile, claudePreToolUseOutput(decision, reason));
+    }
   }
   return output;
 };
@@ -1904,12 +1984,12 @@ export {
   MANAGED_PROVIDERS,
   COMPATIBLE_AGENT_TYPES,
   PHONE_ANSWERED_TOOLS,
+  canonicalToolName,
   toToolLookup,
   renderPreToolUseVerdict,
   HOOK_COMPATIBLE_PROFILES,
   hookCompatibleProfile,
   hookCompatibleProfileBySource,
-  compatibleConfigDir,
   compatibleTargetFiles,
   hookWritePath,
   isHookActivationReport,

package/dist/{chunk-XIHKSZHL.js → chunk-7ERWAYVV.js}

@@ -1,6 +1,6 @@
 import {
   readConfigFileKey
-} from "./chunk-UP7NZXJU.js";
+} from "./chunk-7TDQ7KDY.js";
 
 // src/bell/fleet.ts
 import { closeSync, constants, futimesSync, lstatSync, mkdirSync, openSync, readdirSync, unlinkSync } from "fs";

package/dist/{chunk-MR2PWE62.js → chunk-7GH3D6YG.js}

@@ -1,13 +1,12 @@
 import {
   openCodeConfigDirFrom
-} from "./chunk-S2BNTXP6.js";
+} from "./chunk-LWKVEMVK.js";
 import {
   codexHomeFrom
-} from "./chunk-EWQZISYV.js";
+} from "./chunk-PX53RT6Q.js";
 import {
-  HOOK_COMPATIBLE_PROFILES,
-  compatibleConfigDir
-} from "./chunk-VQYARC2K.js";
+  HOOK_COMPATIBLE_PROFILES
+} from "./chunk-7DQVIIHX.js";
 
 // src/vscode-config.ts
 import { homedir } from "os";
@@ -238,17 +237,17 @@ var agentProbes = (home = homedir2()) => ({
     // never used.
     configMarkers: [openCodeConfigDirFrom(home)]
   },
-  ...compatibleProbes(home),
+  ...compatibleProbes(),
   // "Other" is a set of printed instructions for any MCP or HTTP client. There is
   // nothing to detect, and it must never be auto-selected.
   custom: { binary: null, paths: [], configMarkers: [] }
 });
-var compatibleProbes = (home) => HOOK_COMPATIBLE_PROFILES.reduce((probes, profile) => ({
+var compatibleProbes = () => HOOK_COMPATIBLE_PROFILES.reduce((probes, profile) => ({
   ...probes,
   [profile.agentType]: {
     binary: profile.binary,
     paths: [],
-    configMarkers: [join2(home, ...compatibleConfigDir(profile))]
+    configMarkers: []
   }
 }), {});
 var detectAllAgents = (deps = defaultDeps, home) => {

package/dist/{chunk-UP7NZXJU.js → chunk-7TDQ7KDY.js}

@@ -1,6 +1,6 @@
 import {
   resolveInstallSourceFor
-} from "./chunk-E3WQMDCE.js";
+} from "./chunk-ZFQPSGPO.js";
 import {
   backupFile,
   readJsonSafe,

package/dist/{chunk-IH7YUPFN.js → chunk-BXLFUTSD.js}

@@ -1,9 +1,9 @@
 import {
   canonicalGateInputs
-} from "./chunk-WTT24AUA.js";
+} from "./chunk-5AATCXJN.js";
 import {
   canonicalJson
-} from "./chunk-EWQZISYV.js";
+} from "./chunk-PX53RT6Q.js";
 import {
   writeFileAtomic
 } from "./chunk-4LL6LG5X.js";
@@ -11,7 +11,7 @@ import {
   BLOCKED_ACTION_GRANT_TTL_SECONDS,
   blockedActionIdentity,
   shouldDeferToNativeMode
-} from "./chunk-VQYARC2K.js";
+} from "./chunk-7DQVIIHX.js";
 
 // src/native-defer.ts
 var nativeDeferOptions = () => {

package/dist/{chunk-AH5OO2YZ.js → chunk-C3WH44MH.js}

@@ -2,17 +2,17 @@ import {
   CLAUDE_HOOK_EVENTS,
   GEMINI_HOOK_EVENTS,
   hasGeminiHooks
-} from "./chunk-YM4G6CFN.js";
+} from "./chunk-ERP7FOFQ.js";
 import {
   CODEX_HOOK_EVENTS,
   hasCodexHooks,
   holdBudgetOf
-} from "./chunk-EWQZISYV.js";
+} from "./chunk-PX53RT6Q.js";
 import {
   CURSOR_GATE_EVENTS,
   HOOK_LOCATOR_BINARY,
   hookCommandHoldBudget
-} from "./chunk-VQYARC2K.js";
+} from "./chunk-7DQVIIHX.js";
 
 // src/diagnostics/wiring.ts
 var record = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : null;

package/dist/{chunk-MZUXTN7X.js → chunk-CG4ZUQ5O.js}

@@ -2,10 +2,10 @@ import {
   resolveBinary,
   resolveGlobalPackageVersion,
   resolvePackageVersionFromBinary
-} from "./chunk-EWQZISYV.js";
+} from "./chunk-PX53RT6Q.js";
 import {
   MANAGED_PROVIDERS
-} from "./chunk-VQYARC2K.js";
+} from "./chunk-7DQVIIHX.js";
 
 // src/live-capabilities.ts
 var CLAUDE_BRIDGE_CAPABILITY = "claude-bridge";

package/dist/{chunk-6JUCFMSF.js → chunk-CVCSUAXI.js}

@@ -4,17 +4,17 @@ import {
 } from "./chunk-XHKBHWLX.js";
 import {
   getMachineId
-} from "./chunk-J7PJALS2.js";
+} from "./chunk-KZPUARCU.js";
 import {
   pusharyDir,
   resolveGlobalBinary
-} from "./chunk-EWQZISYV.js";
+} from "./chunk-PX53RT6Q.js";
 import {
   getPackageVersion
 } from "./chunk-DINDL2CF.js";
 import {
   readControlMode
-} from "./chunk-UP7NZXJU.js";
+} from "./chunk-7TDQ7KDY.js";
 import {
   readJsonSafe,
   writeFileAtomic,

package/dist/{chunk-EZ3GX3NS.js → chunk-DRAATYTY.js}

@@ -1,18 +1,18 @@
 import {
   detectClaudeVersion
-} from "./chunk-IPDBFJ2M.js";
+} from "./chunk-JQJB7BZE.js";
 import {
   addClaudeMcpServer,
   addPusharyHooks,
   addPusharyToolPermissions
-} from "./chunk-6T4OINZB.js";
+} from "./chunk-PX54KULQ.js";
 import {
   claudeUnprovenHolds,
   claudeWired,
   codexUnprovenHolds,
   codexWired,
   geminiWired
-} from "./chunk-AH5OO2YZ.js";
+} from "./chunk-C3WH44MH.js";
 import {
   CLAUDE_HOOK_BINARY,
   CLAUDE_HOOK_EVENTS,
@@ -24,7 +24,7 @@ import {
   needsReregistration,
   registrationSignatures,
   supportedClaudeEvents
-} from "./chunk-YM4G6CFN.js";
+} from "./chunk-ERP7FOFQ.js";
 import {
   CODEX_HOOK_BINARY,
   addCodexHookTrust,
@@ -44,7 +44,7 @@ import {
   registrationHolderOf,
   resolveGlobalBinary,
   vscodePluginMcp
-} from "./chunk-EWQZISYV.js";
+} from "./chunk-PX53RT6Q.js";
 import {
   readJsonSafe,
   writeFileAtomic,

package/dist/{chunk-YM4G6CFN.js → chunk-ERP7FOFQ.js}

@@ -1,16 +1,16 @@
 import {
   NOTIFICATION_MATCHED_TYPES,
   POSTTOOLUSE_MIRRORED_TOOLS
-} from "./chunk-INBTKFT6.js";
+} from "./chunk-UWP66NDF.js";
 import {
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-EWQZISYV.js";
+} from "./chunk-PX53RT6Q.js";
 import {
   CLAUDE_PRETOOLUSE_MATCHER,
   HOOK_BUDGETS,
   HOOK_LOCATOR_BINARY
-} from "./chunk-VQYARC2K.js";
+} from "./chunk-7DQVIIHX.js";
 
 // src/gemini-config.ts
 var GEMINI_HOOK_BINARY = "pushary-gemini-hook";

package/dist/{chunk-PUDQJ772.js → chunk-JOTV75GX.js}

@@ -1,6 +1,6 @@
 import {
   resolvePathBinary
-} from "./chunk-EWQZISYV.js";
+} from "./chunk-PX53RT6Q.js";
 
 // src/hermes-config.ts
 import { execFileSync } from "child_process";

package/dist/{chunk-IPDBFJ2M.js → chunk-JQJB7BZE.js}

@@ -1,6 +1,6 @@
 import {
   parseVersion
-} from "./chunk-YM4G6CFN.js";
+} from "./chunk-ERP7FOFQ.js";
 
 // src/setup/agent-probe.ts
 import { execSync } from "child_process";

package/dist/{chunk-ISELLVBP.js → chunk-KEVJ2WW6.js}

@@ -1,6 +1,6 @@
 import {
   pusharyDir
-} from "./chunk-EWQZISYV.js";
+} from "./chunk-PX53RT6Q.js";
 import {
   readJsonSafe
 } from "./chunk-4LL6LG5X.js";

package/dist/{chunk-2MOQUNFL.js → chunk-KHTBSSY5.js}

@@ -1,6 +1,6 @@
 import {
   readTranscriptPreference
-} from "./chunk-UP7NZXJU.js";
+} from "./chunk-7TDQ7KDY.js";
 
 // src/transcript-setting.ts
 var transcriptEnvironmentPreference = () => {

package/dist/{chunk-DKTFZCLQ.js → chunk-KODKICKJ.js}

@@ -1,17 +1,17 @@
 import {
   activeIdentity
-} from "./chunk-SM54HHVY.js";
+} from "./chunk-YT6H7BB5.js";
 import {
   blockedActionFingerprint,
   defersToNativeMode,
   forgetBlockedActionHint,
   hasBlockedActionHint,
   recordBlockedActionHint
-} from "./chunk-IH7YUPFN.js";
+} from "./chunk-BXLFUTSD.js";
 import {
   isGatingMoment,
   recordKeylessMoment
-} from "./chunk-VACFOGF3.js";
+} from "./chunk-2DT7STR5.js";
 import {
   denyReasonFrom,
   isDeferAnswer
@@ -34,7 +34,7 @@ import {
   scopePathFor,
   settleQuestionsForToolUse,
   throttlePass
-} from "./chunk-WTT24AUA.js";
+} from "./chunk-5AATCXJN.js";
 import {
   DECISION_STOP_REASON,
   askUser,
@@ -49,7 +49,7 @@ import {
 } from "./chunk-LGXUGYUH.js";
 import {
   getMachineId
-} from "./chunk-J7PJALS2.js";
+} from "./chunk-KZPUARCU.js";
 import {
   getApiKey,
   getBaseUrl
@@ -73,7 +73,7 @@ import {
   parseAgentQuestions,
   resolveGate,
   stoppedOutput
-} from "./chunk-VQYARC2K.js";
+} from "./chunk-7DQVIIHX.js";
 
 // src/decision-episode.ts
 var EPISODE_PATH = "/api/agent/decision-episode";

package/dist/{chunk-J7PJALS2.js → chunk-KZPUARCU.js}

@@ -1,6 +1,6 @@
 import {
   pusharyDir
-} from "./chunk-EWQZISYV.js";
+} from "./chunk-PX53RT6Q.js";
 import {
   writeFileAtomic
 } from "./chunk-4LL6LG5X.js";

package/dist/{chunk-RZTH4MIY.js → chunk-LAXU5U75.js}

@@ -1,6 +1,6 @@
 import {
   SETUP_FLAGS
-} from "./chunk-OYYQHJAO.js";
+} from "./chunk-WC5PYFDK.js";
 import {
   parseFlags
 } from "./chunk-GMXKITVA.js";
@@ -14,7 +14,7 @@ import {
   CLAUDE_CONNECTOR_URL,
   COWORK_CONNECTOR_LIMIT,
   COWORK_STANDING_INSTRUCTIONS
-} from "./chunk-VQYARC2K.js";
+} from "./chunk-7DQVIIHX.js";
 
 // src/cli/cowork.ts
 import { readFileSync } from "fs";

package/dist/{chunk-PQG6NTPT.js → chunk-LGO7U23Z.js}

@@ -1,7 +1,7 @@
 import {
   HOOK_HOLD_BUDGET_ENV,
   hookHoldBudgetProof
-} from "./chunk-VQYARC2K.js";
+} from "./chunk-7DQVIIHX.js";
 
 // src/hold-budget.ts
 var takeHookHoldBudget = (args = process.argv.slice(2), env = process.env) => {

package/dist/{chunk-S2BNTXP6.js → chunk-LWKVEMVK.js}

@@ -1,7 +1,7 @@
 import {
   HOOK_BUDGETS,
   OPENCODE_APPROVAL_EVENT
-} from "./chunk-VQYARC2K.js";
+} from "./chunk-7DQVIIHX.js";
 
 // src/opencode-plugin.ts
 var OPENCODE_PLUGIN_MARKER = "pushary-opencode-plugin w1";

package/dist/{chunk-FO4HHPMO.js → chunk-OGSRCIOD.js}

@@ -3,7 +3,7 @@ import {
   decodePublicKey,
   generateSessionKey,
   wrapSessionKey
-} from "./chunk-BBUZD7MU.js";
+} from "./chunk-6QCN5XQE.js";
 import {
   fetchTranscriptRecipients,
   uploadTranscriptRecords

package/dist/{chunk-PWIMJP4U.js → chunk-PCT2MYG5.js}

@@ -6,16 +6,16 @@ import {
 } from "./chunk-YKLCWWEI.js";
 import {
   hookOwnerOf
-} from "./chunk-DZYIAMKR.js";
+} from "./chunk-W6XVHP4U.js";
 import {
   ensureDaemonRunning
-} from "./chunk-6JUCFMSF.js";
+} from "./chunk-CVCSUAXI.js";
 import {
   buildTranscriptRecords,
   decodePublicKey,
   generateSessionKey,
   wrapSessionKey
-} from "./chunk-BBUZD7MU.js";
+} from "./chunk-6QCN5XQE.js";
 import {
   fetchTranscriptRecipients,
   uploadTranscriptRecords
@@ -23,14 +23,14 @@ import {
 import {
   transcriptEnvironmentPreference,
   transcriptsEnabled
-} from "./chunk-2MOQUNFL.js";
+} from "./chunk-KHTBSSY5.js";
 import {
   codexHome,
   pusharyDir
-} from "./chunk-EWQZISYV.js";
+} from "./chunk-PX53RT6Q.js";
 import {
   readTranscriptPreference
-} from "./chunk-UP7NZXJU.js";
+} from "./chunk-7TDQ7KDY.js";
 import {
   writeJsonAtomic
 } from "./chunk-4LL6LG5X.js";

package/dist/{chunk-EWQZISYV.js → chunk-PX53RT6Q.js}

@@ -2,7 +2,7 @@ import {
   HOOK_BUDGETS,
   HOOK_LOCATOR_BINARY,
   withHookHoldBudget
-} from "./chunk-VQYARC2K.js";
+} from "./chunk-7DQVIIHX.js";
 
 // src/npm.ts
 import { execFileSync, execSync } from "child_process";

package/dist/{chunk-6T4OINZB.js → chunk-PX54KULQ.js}

@@ -1,17 +1,17 @@
 import {
   CLAUDE_HOOK_EVENTS,
   supportedClaudeEvents
-} from "./chunk-YM4G6CFN.js";
+} from "./chunk-ERP7FOFQ.js";
 import {
   guardBinary,
   holdBudgetOf,
   isProtectedByScope,
   registerHookEntry
-} from "./chunk-EWQZISYV.js";
+} from "./chunk-PX53RT6Q.js";
 import {
   HOOK_LOCATOR_BINARY,
   withHookHoldBudget
-} from "./chunk-VQYARC2K.js";
+} from "./chunk-7DQVIIHX.js";
 
 // src/claude-config.ts
 import { join } from "path";